SecuBuzz · Quick Cybersecurity News in 60 Words & CISA KEV Radar
Security news in 60 words.Zero-days within hours of CISA listing them.
SecuBuzz condenses the day’s cybersecurity reporting into source-linked briefs and pushes new Known Exploited Vulnerabilities to your Android phone, with the remediation deadline attached.
Google Play Get it on Google PlayRead today’s briefs
KEVs added, last 7 days 56
Next federal deadline10-29(CVE-2026-109618)
Interactive showcase · Click tabs to explore
General LOW 4h ago
US DOJ Indicts Malaysian National in Madagascar Scam Operation
The U.S. Department of Justice indicted a Malaysian national involved in a scam center operation that targeted victims in Madagascar. The indictment also covers four other foreign nationals and highlights the expanding global reach of scam center industries across multiple jurisdictions. Law enforcement agencies should monitor cross-border scam operations and coordinate international investigations to disrupt similar illicit networks.
Vulnerability MEDIUM 6h ago
Microsoft Releases Windows OOB Updates to Distrust eMudhra Certificates
Microsoft released out‑of‑band Windows updates to remove trust in certificates issued by the compromised eMudhra certificate authority, protecting systems that do not receive automatic certificate trust updates. The flaw stems from compromised CA keys that enabled attackers to actively issue fraudulent certificates, creating a potential man‑in‑the‑middle risk for TLS connections. Apply the update via Windows Update immediately.
CVE HIGH 6h ago
CVE‑2026‑111497: Out‑of‑Bounds Write in Brotli Library
CVE‑2026‑111497 is a remotely exploitable out‑of‑bounds write flaw in Google’s Brotli compression library that affects any application decompressing Brotli data via node:zlib. The flaw, also known as Node2Shell, allows attackers to corrupt process memory, potentially causing crashes or leaking sensitive data, and a PoC exists. Google and Node.js have issued patches; security teams should upgrade to Brotli or apply the node:zlib fix immediately.
CVE CRITICAL 7h ago
Oracle PeopleSoft SSRF Exploit CVE-2026-35273
Oracle PeopleSoft’s CVE‑2026‑35273 SSRF flaw lets attackers forge internal requests that bypass validateClient checks. The vulnerability supports remote code execution with a CVSS of 9.2, and ShinyHunters has confirmed widespread exploitation. Oracle issued a critical patch; teams should apply it immediately and disable external request capabilities as a temporary mitigation.
Built for the ten minutes before your first ticket.
Read the whole feed before stand-up Every brief is capped at 60 words. A full day of coverage takes about five minutes, not fifty open tabs.
Every claim traces back to a source Briefs link to the original reporting and vendor advisories, so you can verify before you escalate.
KEV alerts that carry the deadline When CISA adds a CVE to the Known Exploited Vulnerabilities catalog, you get a push with the vendor, product and remediation due date.
Start your morning triage on Secu Buzz
Free on Android. Curated 60-word briefs and automated CISA KEV threat alerts delivered without noise or tracking.